[denvrede]

We also just adopted Tailscale for our org and I can answer that one:

SSO for Auth: before we had to go through the key exchange process for every employee and then manually update the Gateways wg conf. Now it’s just: login here with your work account and you’re done.

Authorization config: I like the ACL abstractions on top of Wireguard. It’s a part is completely missing and building it yourself would be a nightmare. I also don’t want to manage iptables for every device.

All of the nice little feature that they provide:

Funnel Kubernetes operator Magic DNS